WHAT IS CLAIMED IS: 



1. A method for using a shared library called up from a 
calling source program in a tamper resistant microprocessor 
which has a function for decrypting and executing encrypted 
codes and a table formed by a plurality of regions for 
storing a plurality of encryption keys corresponding to at 
least one program and at least one shared library to be 
called up by the at least one program, the method 
comprising : 

creating a task for the shared library; 
allocating a task identifier to the task; 
acquiring an instruction key from a header of the 
shared library; 

storing the instruction key into a region of the table 
corresponding to the task identifier allocated to the task 
for the shared library in the microprocessor; 

initializing by executing a loader in the shared 
library; and 

returning a control to the calling source program via 
an entry point in the shared library. 

2. The method of claim 1, further comprising: 
loading another shared library by referring to an 

25 import table in the shared library, after storing the 
instruction key into the table in the microprocessor. 

3. The method of claim 1, wherein the initializing step 
executes as many loaders in the shared library as a number 

30 of calling source programs, and the method further 
comprising: 

producing as many data keys as the number of calling 
source programs for encrypting data to be used by the 
shared library, before the returning step; 
35 storing the data keys into a region of the table to 
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which the task identifier of the task for the shared 
library is allocated in the microprocessor, before the 
returning step; 

setting the shared library in a standby state waiting 
5 for a call up from the calling source program, after the 
returning step; 

having the shared library authenticated by the calling 
source program; 

receiving an address of a shared memory region 
10 produced by the calling source program; 

setting the shared memory region as a shared encrypted 
data region to be used in data exchange between the calling 
source program and the shared library; 

controlling the shared libraryt to receive a signal 
15 for calling up a sub-routine in the shared library from the 
calling source program; 

verifying a checksum of data of the calling source 
program; 

carrying out a processing requested from the calling 
20 source program when the checksum of the data of the calling 
source program matches the data; and 

sending a result of the requested processing by adding 
the checksum into the shared encrypted data region. 

25 4. The method of claim 3, further comprising: 

encrypting a work memory region for carrying out the 
processing requested from the calling source program by 
using one of the data keys of the shared library, after the 
verifying step; 

30 wherein the carrying out step carries out the 

processing requested from the calling source program in the 
work memory region encrypted by the encrypting step. 

5. The method of claim 3, wherein the authenticating step 
35 carries out an authentication by sending to the calling 
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source program an authentication information to which a 
signature according to a secret key stored in the shared 
library in advance is attached, and producing a common key 
to be used between the calling source program and the 
5 shared library. 

6. The method of claim 5, further comprising: 
encrypting the common key by using one of the data 

keys of the shared library, after the authenticating step; 
10 and 

storing the common key encrypted by the encrypting 
step into a secret data region of the shared library. 

7. The method of claim 1, further comprising: 

15 generating a data key for encrypting a work memory 

region of the shared library from a random number from a 
random number generation unit in the microprocessor before 
the returning step; and 

setting the shared library in a standby state waiting 

20 for a call up from the calling source program, after the 
returning step. 

8. A computer program product for causing a tamper 
resistant microprocessor which has a function for 

25 decrypting and executing encrypted codes and a table formed 
by a plurality of regions for storing a plurality of 
encryption keys corresponding to at least one program and 
at least one shared library to be called up by the at least 
one program, to use a shared library called up from a 

30 calling source program, the computer program product 
comprising: 

a first computer program code for causing the tamper 
resistant microprocessor to create a task for the shared 
library ; 

35 a second computer program code for causing the tamper 
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resistant microprocessor to allocate a task identifier to 
the task; 

a third computer program code for causing the tamper 
resistant microprocessor to acquire an instruction key from 
5 a header of the shared library; 

a fourth computer program code for causing the tamper 
resistant microprocessor to store the instruction key into 
a region of the table corresponding to the task identifier 
allocated to the task for the shared library in the 
10 microprocessor ; 

a fifth computer program code for causing the tamper 
resistant microprocessor to initialize by executing a 
loader in the shared library; and 

a sixth computer program code for causing the tamper 
15 resistant microprocessor to return a control to the calling 
source program via an entry point in the shared library. 

9. The computer program product of claim 8, wherein the 

fifth computer program code executes as many loaders in the 
20 shared library as a number of calling source programs, and 

the computer program product further comprising: 

a seventh computer program code for causing the tamper 

resistant microprocessor to produce as many data keys as 

the number of calling source programs for encrypting data 
25 to be used by the shared library, before the sixth computer 

program code returns the control; 

an eighth computer program code for causing the tamper 

resistant microprocessor to store the data keys into a 

region of the table to which the task identifier of the 
30 task for the shared library is allocated in the 

microprocessor, before the sixth computer program code 

returns the control; 

a ninth computer program code for causing the tamper 

resistant microprocessor to set the shared library in a 
35 standby state waiting for a call up from the calling source 
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program, after the sixth computer program code returns the 
control ; 

a tenth computer program code for causing the tamper 
resistant microprocessor to have the shared library 
5 authenticated by the calling source program; 

a eleventh computer program code for causing the 
tamper resistant microprocessor to receive an address of a 
shared memory region produced by the calling source 
program; 

10 a twelfth computer program code for causing the tamper 

resistant microprocessor to set the shared memory region as 
a shared encrypted data region to be used in data exchange 
between the calling source program and the shared library; 
a thirteenth computer program code for causing the 

15 tamper resistant microprocessor to control the shared 

library to receive a signal for calling up a sub-routine in 
the shared library from the calling source program; 

a fourteenth computer program code for causing the 
tamper resistant microprocessor to verify a checksum of 

20 data of the calling source program; 

a fifteenth computer program code for causing the 
tamper resistant microprocessor to carry out a processing 
requested from the calling source program when the checksum 
of the data of the calling source program matches the data; 

25 and 

a sixteenth computer program code for causing the 
tamper resistant microprocessor to send a result of the 
requested processing by adding the checksum into the shared 
encrypted data region. 
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